Section C Table III

Table III. Security Relevant Data Items

Category	Type of Data Item	Name of Data Item	Description of Data Item
Generic Containers	typedef struct SECAlgorithmIDStr	SECAlgorithmID	The structure containing two SECItems which identify the X.500 algorithm.
	typedef struct SECItemStr	SECItem	Generic container used to hold type of data, actual data content, and length of data.
	typedef struct SECKEYLowPrivateKeyStr	SECKEYLowPrivateKey	Generic container used for low-level private key structures including RSA and DSA private keys. This structure is used below the PKCS #11 service layer and contains the actual private key.
	typedef struct SECKEYLowPublicKeyStr	SECKEYLowPublicKey	Generic container used for low-level public key structures including RSA and DSA public keys. This structure is used below the PKCS #11 service layer and contains the actual public key.
	typedef struct SECKEYPrivateKeyStr	SECKEYPrivateKey	Generic container used as a high-level pointer to the defined private key structures, and is used above the PKCS #11 service layer.
	typedef struct SECKEYPublicKeyStr	SECKEYPublicKey	Generic container used as a high-level pointer to the defined public key structures, and is used above the PKCS #11 service layer.
	typedef enum	SECOidTag	Generic container used to identify the supported object IDs.
	typedef enum _SECStatus	SECStatus	Generic container used primarily to indicate success or failure.
Certificate Storage and Retrieval	typedef struct CERTCertificateStr	CERTCertificate	The structure representing an X.509 certificate object (the unsigned form).
	typedef struct CERTCertDBHandleStr	CERTCertDBHandle	The structure representing a handle to an open certificate database.
	typedef struct CERTCertTrustStr	CERTCertTrust	The trust structure containing flags for SSL and email.
	typedef struct _certDBEntryCert	certDBEntryCert	The structure for certificate database entries.
Digital Signatures	typedef struct DSAPrivateKeyStr	DSAPrivateKey	The structure representing the context of a digital signature containing data associated with the private portion of the DSA key pair.
	typedef struct DSAPublicKeyStr	DSAPublicKey	The structure representing the context of a digital signature verification containing data associated with the public portion of the DSA key pair.
	typedef struct RSAPrivateKeyStr	RSAPrivateKey	The structure representing the context of an RSA signature generation or decryption mechanism used for both signature generation and key exchange; containing data associated with the private portion of the RSA key pair.
	typedef struct RSAPublicKeyStr	RSAPublicKey	The structure representing the context of an RSA signature verification or encryption mechanism used for both signature verification and key exchange; containing data associated with the public portion of the RSA key pair.
Encryption/ Decryption	typedef struct DESContextStr	DESContext	The structure representing the context of a DES encryption/decryption containing an encrypt/decrypt flag, space for up to three distinct keys, space for the carry-forward needed for CBC modes of DES, and function pointers to the appropriate encryption and decryption functions associated with that mode of DES.
Hashing	typedef struct SHA1ContextStr	SHA1Context	The structure representing the context of a SHA-1 hash containing information relevant to performing a SHA-1 hash.
Key Generation	typedef struct PQGParamsStr	PQGParams	The structure representing the context of a digital signature key generation containing multiple items including pointers to both low-level public and private key structures containing the public and private portions of the DSA key pair.
	typedef struct PQGVerifyStr	PQGVerify	The structure representing the context of a digital signature containing data associated with the verification (in terms of validity) of a set of parameters contained in a DSA key pair.
	typedef struct DSAPrivateKeyStr	DSAPrivateKey	The structure containing the private portion of the DSA key pair.
	typedef struct DSAPublicKeyStr	DSAPublicKey	The structure containing the public portion of the DSA key pair.
	typedef struct RSAPrivateKeyStr	RSAPrivateKey	The structure containing the private portion of the RSA key pair.
	typedef struct RSAPublicKeyStr	RSAPublicKey	The structure containing the public portion of the RSA key pair.
PKCS #5 Password-Based Encryption	typedef struct SECItemStr	SECItem	Utilizes this generic container to hold password-based encryption data.
PKCS #12 Personal Information Exchange	typedef struct SEC_PKCS12ExportContextStr	SEC_PKCS12ExportContext	The structure representing the context of a PKCS#12 export operation.
	typedef struct SEC_PKCS12DecoderContextStr	SEC_PKCS12DecoderContext	The structure representing the context of a PKCS#12 import operation.
Prime Number Generation	typedef struct	mp_int	The structure used to hold very large numbers.
	typedef int	mp_err	The integer used to hold error codes from the Multi-Precision Arithmetic (big integer) library.
Private Key Storage and Retrieval	typedef struct SECKEYKeyDBHandleStr	SECKEYKeyDBHandle	The structure representing a handle into the private key database.
	typedef struct SECKEYLowPrivateKeyStr	SECKEYLowPrivateKey	Utilizes this generic container used for low-level private key structures.
SSL Session ID Cache (Secret Management)	typedef struct SSLSecurityInfoStr	SSLSecurityInfo	The structure containing all information relevant to SSL security.
	typedef struct SSLSessionIDStr	SSLSessionID	The structure containing data relevant to the SSL session ID including the session ID cache and the master secret.